Privacy Policy

SignalVeritas analyses the data a merchant already has about their online store and turns it into ranked, evidence-backed suggestions for improving conversion. This policy explains what we collect, why, who we share it with, and how to get it deleted.

It covers the SignalVeritas platform at signalveritas.co and the SignalVeritasShopify app. When you connect a store, you are the controller of that store’s data and we are your processor: we act on your instructions and for your account only.

What we collect

Your account.Name, email address and authentication details, handled by our identity provider. If you subscribe, our payment processor holds your billing details — we never see or store your card number.

Store data you connect or upload. Depending on which sources you enable: product reviews, web analytics, session and heatmap event data, post-purchase survey responses, customer support chat transcripts, advertising creatives, and snapshots and screenshots of your own public storefront pages. We only collect from the sources you explicitly connect.

Usage of the product itself. Basic logs needed to run and secure the service and to bill usage accurately.

Shopify data specifically

Our Shopify app is read-only. It never creates, edits or deletes anything in your store. It reads:

• Aggregate analytics reports — sessions, conversion rate, bounce rate, landing pages, referral sources, product performance, and country-level totals.
• Order totals for paid orders, and the number of orders each order’s customer has placed, which is how we calculate your new-versus-returning customer rate.
• Counts of abandoned checkouts.

It does not read customer names, email addresses, postal addresses or phone numbers, and it does not read your products, inventory or content. Uninstalling the app revokes our access immediately and deletes the stored access token.

Personal data, and how we keep it to a minimum

Some sources can contain personal data whether we want it or not. Reviews, chat transcripts and open-text survey answers are written by your customers and may mention names, email addresses, phone numbers or order numbers.

Chat and survey text is scrubbed of contact details at the point it enters our system, before it is stored or analysed. We do not build customer profiles, we do not track individual shoppers across stores, and we do not use personal data to make automated decisions about any individual. Our output describes patterns across your customers, not individuals.

How we use it

To analyse your store and generate insights and hypotheses for your account. Analysis involves sending compressed, aggregated extracts of your store data to our AI provider for processing. Your data is processed for your account only, is never pooled with or exposed to other customers, is never sold, and is not used to train anyone’s models.

Who we share it with

We use a small set of sub-processors, each under a data processing agreement, and share only what each one needs:

• Anthropic— AI processing of the extracts that produce your insights.
• Neon— database hosting in the European Union.
• Render and Vercel— application hosting.
• Clerk— account authentication.
• Stripe— subscription billing.

We do not sell personal data or share it for advertising. We may disclose data if legally compelled, and will tell you unless we are prohibited from doing so.

Security and location

Data is encrypted in transit and at rest. Credentials you connect are additionally encrypted with a key held separately from the database. Access to production data is limited to the people who need it to operate and support the service. Our primary database and application servers are located in the European Union.

How long we keep it

Connected store data is kept while your account is active, because the analysis compares current performance against history. Some data expires sooner: session metric snapshots are discarded after 30 days.

You can delete a store and everything belonging to it — imported data, generated insights and connected credentials — from its Settings page at any time. You can delete your entire account from your profile, which removes every store you own and cancels any subscription. Both are immediate and irreversible in our live systems; residual copies in encrypted backups are removed as those backups rotate.

Your rights, and your customers’

Depending on where you live you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to a supervisory authority. Email us and we will respond within 30 days.

If one of yourcustomers asks you to delete or produce their data, contact us and we will find and remove it from your store’s data. Our Shopify app holds no customer personal data of its own, so Shopify’s privacy requests have nothing to erase there; anything held on the platform is handled through the process above.

Cookies

The application uses cookies that are strictly necessary to keep you signed in and to keep the service secure. We do not run advertising or cross-site tracking cookies on the application.

Changes to this policy

If we make a material change we will update the date above and, for anything that meaningfully affects how we handle your data, tell you directly before it takes effect.

Contact

Questions about your data, this policy, or a data processing agreement? Email hello@signalveritas.co.